Contain your Desktop Applications with Flatpak

Transcription

1 Contain your Desktop Applications with Flatpak Lili Cosic Github: lilic Twitter: LiliCosic

2 Berlin-based software company building foundational Linux technologies

3 Find out more about us Blog: kinvolk.io/blog Github: github.com/kinvolk Twitter: kinvolkio

4 Flatpak?

5 About Flatpak github.com/flatpak/flatpak Build, distribute, install and run applications on Linux Secure desktop applications in containers

6 Advantages of Flatpak Cross linux distribution Secure Dependency bundling Versioning

7 Linux distributions:

8 Get Flatpak Fedora: $ sudo dnf install flatpak Ubuntu: $ sudo add-apt-repository ppa:alexlarsson/flatpak $ sudo apt install flatpak

9 Installing Flatpak applications

10 Install from.flatpakref $ flatpak install --from

11 Install from remote repositories $ flatpak remote-add --if-not-exists gnome $ flatpak remote-add gnome-apps $ flatpak install gnome-apps org.gnome.totem

12 Run Flatpak Applications $ flatpak run org.videolan.vlc

13 What is under the hood?

14 Credit:

15 Sandbox data code library shared runtime library

16 Flatpak Sandbox Different to rkt, Docker, etc. Unprivileged user namespaces No need for root

17 Technologies used bubblewrap from Project Atomic systemd OCI OSTree Appstream portals

18 Building Flatpak applications

19 Building a simple application $ flatpak build-init dictionary org.gnome.dictionary org.gnome.sdk org.gnome.platform 3.22 $ wget $ tar xvf gnome-dictionary tar.xz $ cd gnome-dictionary / $ flatpak build../dictionary./configure --prefix=/app $ flatpak build../dictionary make $ flatpak build../dictionary make install $ cd.. $ flatpak build-finish dictionary --socket=x11 --share=network --command=gnome-dictionary $ flatpak build-export repo dictionary $ flatpak --user remote-add --no-gpg-verify --if-not-exists tutorial-repo repo $ flatpak --user install tutorial-repo org.gnome.dictionary $ flatpak run org.gnome.dictionary

20 flatpak-builder

21 $ flatpak-builder --repo=repo build org.gnome.dictionary.json

22 flatpak-builder flatpak-builder - tool that automates multi-step build process Simplifies building applications Manifest files Reproducible Maintainable Cache

23 Manifest file example "app-id": "org.gnome.dictionary", "runtime": "org.gnome.platform", "runtime-version": "3.26", "sdk": "org.gnome.sdk", "command": "gnome-dictionary", "finish-args": [ "--share=ipc", "--socket=x11", "--socket=wayland", "--share=network", "--filesystem=home" ], "cleanup": ["/include", "/lib/pkgconfig", "/share/pkgconfig", "/share/aclocal", "/man", "/share/man", "/share/gtk-doc", "*.la", "*.a", ], "modules": [ "name": "gnome-dictionary", "sources": [ "type": "git", "url": "git://git.gnome.org/gnome-dictionary" ] ]

24 app-id "app-id": "org.gnome.dictionary", "runtime": "org.gnome.platform", "runtime-version": "3.26", "sdk": "org.gnome.sdk", "command": "gnome-dictionary", "finish-args": [ "--share=ipc", "--socket=x11", "--socket=wayland", "--share=network", "--filesystem=home" ], "cleanup": ["/include", "/lib/pkgconfig", "/share/pkgconfig", "/share/aclocal", "/man", "/share/man", "/share/gtk-doc", "*.la", "*.a", ], "modules": [ "name": "gnome-dictionary", "sources": [ "type": "git", "url": "git://git.gnome.org/gnome-dictionary" ] ]

25 runtime "app-id": "org.gnome.dictionary", "runtime": "org.gnome.platform", "runtime-version": "3.26", "sdk": "org.gnome.sdk", "command": "gnome-dictionary", "finish-args": [ "--share=ipc", "--socket=x11", "--socket=wayland", "--share=network", "--filesystem=home" ], "cleanup": ["/include", "/lib/pkgconfig", "/share/pkgconfig", "/share/aclocal", "/man", "/share/man", "/share/gtk-doc", "*.la", "*.a", ], "modules": [ "name": "gnome-dictionary", "sources": [ "type": "git", "url": "git://git.gnome.org/gnome-dictionary" ] ]

26 runtime Basic dependencies - libraries Base of your application Which runtime you want to use depends on each application and the dependencies it requires Application runtime must be already installed on the host system

27 command "app-id": "org.gnome.dictionary", "runtime": "org.gnome.platform", "runtime-version": "3.26", "sdk": "org.gnome.sdk", "command": "gnome-dictionary", "finish-args": [ "--share=ipc", "--socket=x11", "--socket=wayland", "--share=network", "--filesystem=home" ], "cleanup": ["/include", "/lib/pkgconfig", "/share/pkgconfig", "/share/aclocal", "/man", "/share/man", "/share/gtk-doc", "*.la", "*.a", ], "modules": [ "name": "gnome-dictionary", "sources": [ "type": "git", "url": "git://git.gnome.org/gnome-dictionary" ] ]

28 Finishing arguments "app-id": "org.gnome.dictionary", "runtime": "org.gnome.platform", "runtime-version": "3.26", "sdk": "org.gnome.sdk", "command": "gnome-dictionary", "finish-args": [ "--share=ipc", "--socket=x11", "--socket=wayland", "--share=network", "--filesystem=home" ], "cleanup": ["/include", "/lib/pkgconfig", "/share/pkgconfig", "/share/aclocal", "/man", "/share/man", "/share/gtk-doc", "*.la", "*.a", ], "modules": [ "name": "gnome-dictionary", "sources": [ "type": "git", "url": "git://git.gnome.org/gnome-dictionary" ] ]

29 cleanup "app-id": "org.gnome.dictionary", "runtime": "org.gnome.platform", "runtime-version": "3.26", "sdk": "org.gnome.sdk", "command": "gnome-dictionary", "finish-args": [ "--share=ipc", "--socket=x11", "--socket=wayland", "--share=network", "--filesystem=home" ], "cleanup": ["/include", "/lib/pkgconfig", "/share/pkgconfig", "/share/aclocal", "/man", "/share/man", "/share/gtk-doc", "*.la", "*.a", ], "modules": [ "name": "gnome-dictionary", "sources": [ "type": "git", "url": "git://git.gnome.org/gnome-dictionary" ] ]

30 modules "app-id": "org.gnome.dictionary", "runtime": "org.gnome.platform", "runtime-version": "3.26", "sdk": "org.gnome.sdk", "command": "gnome-dictionary", "finish-args": [ "--share=ipc", "--socket=x11", "--socket=wayland", "--share=network", "--filesystem=home" ], "cleanup": ["/include", "/lib/pkgconfig", "/share/pkgconfig", "/share/aclocal", "/man", "/share/man", "/share/gtk-doc", "*.la", "*.a", ], "modules": [ ] "name": "gnome-dictionary", "sources": [ "type": "git", "url": "git://git.gnome.org/gnome-dictionary" ]

31 flatpak-builder Creates new directory called build Builds and installs modules Finishes the build using the finish arguments Creates a directory called repo and exports to it $ flatpak-builder --repo=repo build org.gnome.dictionary.json

32 DEMO

33 Flathub

34 Flathub Central place for building and hosting Flatpak builds Flathub $ flatpak remote-add flathub $ flatpak --user install flathub org.gnome.recipes

35 Spotlight of Flathub applications VLC flatpak install --from Spotify flatpak install --from Slack flatpak install --from

36 Flatpak vs Snap

37 Flatpak Snap Distributions Linux desktop and embedded Linux desktop, server, embedded, mobile Updates Yes Yes, automatic Company RedHat Canonical Advantage Flathub Auto-build and publish from github Sandbox Yes Yes

38 The end

39 More Info about Flatpak flatpak.org docs.flatpak.org/en/latest flatpak.org/flatpak/flatpak-docs.html IRC: #flatpak on Freenode Mailing list: